cryptorank.io
Resources curated from this publisher and indexed across appsec.fyi topic pages. Last item added: 2026-09-03.
| Date Added | Resource | Excerpt |
|---|---|---|
| 2026-09-03 2026 | SonicWall SMA1000 Hit by Second Zero-Day Chain in Seven Weeks Same SSRF-to-Injection PatternSSRF | Writeup detailing a second zero-day chain against SonicWall SMA1000 appliances (CVE-2026-83548 and CVE-2026-83549), involving pre-auth SSRF and post-auth OS command injection. This chain mirrors July's SSRF-to-injection attacks (CVE-2026-15409/15410), which utilized ROOTRUN and KNUCKLEBALL. Affected models require immediate patching to specific versions due to active exploitation and a lack of published IoCs. |
| 2026-08-28 2026 | Sentry MCP Server SSRF Exposes How Agent Trust Chains Become Attack VectorsSSRF | Library for securing applications against Server-Side Request Forgery (SSRF) vulnerabilities, specifically detailing CVE-2026-81421 in Sentry MCP Server. This vulnerability allows attackers to force the server to call arbitrary endpoints via the raw_sentry_api, with a reported CVSS score of 7.3 and potential for 9.0. The analysis highlights systemic risks, with 36.7% of scanned MCP servers vulnerable and 41% lacking authentication, creating attack vectors for crypto infrastructure and DeFi integrations, echoing agentjacking research from DEF CON 34. |
| 2026-08-22 2026 | AWS AgentCore Harness Bypass Exposed a Cross-Platform Vulnerability Class in Agent RuntimesAPI Sec | Writeup on CVE-2026-18830 and CVE-2026-18953, detailing a cross-platform vulnerability class in agent runtimes. These high-severity flaws in AWS Bedrock AgentCore InvokeHarness and awslabs/aws-transform-mcp-server allowed unauthorized tool execution and arbitrary file writes via caller-supplied tool-use blocks and path traversal. The research highlights systemic risks in agent harnesses, including those found in Google ADK and Vercel AI SDK, emphasizing the need for stricter input validation and authorization checks. |
| 2026-08-07 2026 | Critical RCE in IBM Langflow Triggers CISA Emergency DeadlineRCE | Writeup of CVE-2026-9198, a critical RCE in IBM Langflow exploited by unauthenticated callers to mint SUPERUSER tokens and execute arbitrary Python code. This vulnerability, rated CVSS 9.8, triggered a CISA emergency deadline for federal agencies, requiring remediation to Langflow 1.10.2, disabling `LANGFLOW_AUTO_LOGIN`, and restricting API access. Recurring severe vulnerabilities like CVE-2026-33017 and CVE-2026-55255 highlight ongoing security risks in AI agent infrastructure. |
| 2025-11-14 2025 | Researcher uncovers a critical SSRF vulnerability in ChatGPTs Custom GPT | Tech OpenAISSRF | Writeup detailing a critical Server-Side Request Forgery (SSRF) vulnerability discovered in ChatGPT's Custom GPT "Actions" feature by researcher SirLeeroyJenkins. This SSRF flaw could have allowed attackers to expose internal cloud credentials by tricking the AI into making requests to unintended destinations. The vulnerability was exploited by chaining a 302 redirect with a custom API key mimicking the "Metadata: True" header required to access Azure's Instance Metadata Service, a technique previously used in security audits. OpenAI has since patched this issue, which was reported through their Bugcrowd program. |
| 2025-11-13 2025 | Researcher uncovers a critical SSRF vulnerability in ChatGPTs Custom GPT | Tech OpenAISSRF | Writeup detailing a critical SSRF vulnerability in ChatGPT's Custom GPTs, discovered by researcher SirLeeroyJenkins. The exploit leveraged the "Actions" feature's OpenAPI schema integration and a 302 redirect to bypass security restrictions, allowing access to internal cloud credentials via Azure's Instance Metadata Service. This technique, a variant of full-read SSRF, was successfully exploited by injecting a custom API key named "Metadata" with the value "true". |